@misc{Hoefig2016, author = {H{\"o}fig, Kai}, title = {Analyzing the availability of a system}, year = {2016}, abstract = {An apparatus and method for analyzing availability of a system including subsystems each having at least one failure mode with a corresponding failure effect on the system are provided. The apparatus includes a degraded mode tree generation unit configured to automatically generate a degraded mode tree. The degraded mode tree includes at least one degraded mode element representing a degraded system state of the system that deviates from a normal operation state of the system based on a predetermined generic system meta model stored in a database including Failure Mode and Effects Analysis elements representing subsystems, failure modes, failure effects, and diagnostic measures. The apparatus also includes a processor configured to evaluate the generated degraded mode tree for calculation of the availability of the system.}, language = {en} } @misc{HoefigZeller2016, author = {H{\"o}fig, Kai and Zeller, Marc}, title = {Automated Qualification of a Safety Critical System}, year = {2016}, abstract = {A method for automated qualification of a safety critical system including a plurality of components is provided. A functional safety behavior of each component is represented by an associated component fault tree element. The method includes automatically performing a failure port mapping of output failure modes to input failure modes of component fault tree elements based on a predetermined generic fault type data model stored in a database.}, language = {en} } @misc{Hoefig2016, author = {H{\"o}fig, Kai}, title = {Automated Recertification of a Safety Critical System}, year = {2016}, abstract = {A method for automated recertification of a safety critical system with at least one altered functionality is provided. The method includes providing a failure propagation model of the safety critical system. The method also includes updating the failure propagation model of the safety critical system according to the at least one altered functionality using inner port dependency traces between inports and outports of a failure propagation model element representing the at least one altered functionality. The method includes calculating top events of the updated failure propagation model, and comparing the calculated top events with predetermined system requirements to recertify the safety critical system.}, language = {en} } @inproceedings{ZellerHoefig2016, author = {Zeller, Marc and H{\"o}fig, Kai}, title = {INSiDER: Incorporation of system and safety analysis models using a dedicated reference model}, series = {2016 Annual Reliability and Maintainability Symposium (RAMS)}, booktitle = {2016 Annual Reliability and Maintainability Symposium (RAMS)}, pages = {1 -- 6}, year = {2016}, abstract = {In order to enable model-based, iterative design of safety-relevant systems, an efficient incorporation of safety and system engineering is a pressing need. Our approach interconnects system design and safety analysis models efficiently using a dedicated reference model. Since all information are available in a structured way, traceability between the model elements and consistency checks enable automated synchronization to guarantee that information within both kind of models are consistent during the development life-cycle.}, language = {en} } @inproceedings{MoehrleZellerHoefigetal.2016, author = {M{\"o}hrle, Felix and Zeller, Marc and H{\"o}fig, Kai and Rothfelder, Martin and Liggesmeyer, Peter}, title = {Automating compositional safety analysis using a failure type taxonomy for component fault trees}, series = {Risk, Reliability and Safety: Innovating Theory and Practice: Proc. of ESREL}, booktitle = {Risk, Reliability and Safety: Innovating Theory and Practice: Proc. of ESREL}, pages = {1380 -- 1387}, year = {2016}, abstract = {Safety assurance is a major challenge in the design of today's complex embedded systems and future Cyber-physical systems. Changes in a system's architectural design invalidate former safety analyses and require a manual adaptation of related safety analysis models in order to restore consistency. In this work, we present an approach for automating the compositional assembly of Component Fault Trees by automatically generating mappings between their input and output failure modes. Therefore, we propose a taxonomy of failure types for annotating model elements and deriving a model of the failure propagation. This way, automatic and system-wide safety analyses can be executed and easily repeated after making modiļ¬cations to the system's architecture. We demonstrate the feasibility of our approach using an example ethylene vaporization unit from an industrial domain.}, language = {en} }